| Package | Affected versions | Patched versions |
|---|---|---|
| neon webmail | = 5.06= 5.07 |
Cross-site scripting (XSS) vulnerability in the updateuser servlet in Neon WebMail for Java before 5.08 allows remote attackers to inject arbitrary web script or HTML via the in_name parameter, as used by the Name field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free